Frequent releases, repository tests, clear MIT licensing, and organization ownership support continued maintenance. The package remains small and lightly adopted, so future support depends on a narrow active team.
72%
Total Score
83
100
88
75
All 19 recent commits came from one contributor, giving the project a very narrow active contributor base. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Composer build tooling is present, but no security scanning tools were detected. That is a meaningful security-process gap, though it does not by itself indicate an unsafe release.
The repository has no security policy. For a telemetry library, this reduces the transparency of vulnerability reporting and response expectations.
Version 0.44.1 is not a stable major release, but it is not marked prerelease and recent releases have not used prerelease versions. The versioning status warrants only limited caution for consumers expecting a 1.x stability contract.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
symfony/polyfill-mbstring Version ^1.33 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.